Correct Answer: Yes, this is the recommended approach for identity-based security within a VPC
Using service accounts for firewall targets (rather than tags) provides a stronger security boundary....
Correct Answer
Yes, this is the recommended approach for identity-based security within a VPC
Why This Answer Is Correct
Using service accounts for firewall targets (rather than tags) provides a stronger security boundary.
This question evaluates your knowledge of VPC Firewall Rules — a core concept tested in Associate Cloud Engineer. Understanding VPC Firewall Rules is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Google Compute Engine instance level. What should you configure?
How does Google Cloud process firewall rules regarding 'Priority'?
Which attribute of a firewall rule would you use to apply it only to a specific set of VMs in a VPC (e.g., all VMs with the label 'web-server')?
What is the implied default behavior for INGRESS traffic in a newly created VPC?
What is the implied default behavior for EGRESS traffic in a Google Cloud VPC?